d3m-simon (1.2.5), easyquake (>=1.3.0, <=1.4.0) +1 more potentially affected by CVE-2020-15190 via tensorflow-gpu (2.2.0)

tensorflow-gpu PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - d3m-simon 1.2.5 - easyquake =1.3.0, =0.7.1, =0.7.2 Source cves: CVE-2020-15190 Source advisory: GHSA-4G9F-63RX-5CW4...

d3m-simon (1.2.5), easyquake (>=1.3.0, <=1.4.0) +1 more potentially affected by CVE-2020-15190 via tensorflow-gpu (2.2.0)

tensorflow-gpu PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - d3m-simon 1.2.5 - easyquake =1.3.0, =0.7.1, =0.7.2 Source cves: CVE-2020-15190 Source advisory: OSV:GHSA-4G9F-63RX-5CW4...